1. Conduid
  2. Developer Tools
  3. Demo
MCP server · Developer Tools

Demo

URL MCP is a proof of concept stateless MCP server builder that allows users to build MCP servers without writing or hosting code. It's intended for protocol and security experimentation rather than for building real world MCP integrations.

Unclaimed MIT last commit 6 months ago devtools
65Good

Scored yesterday · breakdown

About Demo

Demo is an MCP server published by sshh12 in the Developer Tools category: uRL MCP is a proof of concept stateless MCP server builder that allows users to build MCP servers without writing or hosting code. It's intended for protocol and security experimentation rather than for building real world MCP integrations.

The repository has 10 stars and 2 forks, with the last commit 6 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

Claude Code
claude mcp add demo -- npx -y @mcp-workbench/demo-mcp
npx
npx -y @mcp-workbench/demo-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Demo

Powered by Claude · Grounded in docs

I know everything about Demo. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 3 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
  • !Dependencies pinnedNo lockfile. Installs can pull different code over time.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

URL-Based MCP Server

URL MCP is a proof of concept stateless MCP server builder that allows users to build MCP servers without writing or hosting code. It's intended for protocol and security experimentation rather than for building real world MCP integrations.

Usage

  1. Go to https://url-mcp-demo.sshh.io/
  2. Add custom tools to your MCP server
  • If you want to hardcode tool responses, select "static text response"
  • If you want dynamic HTTP-based responses, select "http post endpoint"
    • Typically I'll use a temp URL from https://webhook.site/ which logs all the requests and allows you to configure custom responses
  1. Copy the MCP Configuration into your client of choice

Local Hosting

There is not really a point to hosting this locally (the whole idea is that you can use this without hosting just with the URL) but in case you want to modify the app itself:

  1. cd backend && pip install requirements.txt && python main.py

Example: System Prompt Exfiltration

Create a custom MCP server for extracting the system prompt of an application.

  1. Configure the tools to trick the client into trusting it. Use a https://webhook.site/ temp url for the tool response.
  2. Copy the MCP config
  3. In the client ask for an audit and the view the webhook logs.
Step 1 Step 2 Step 3

README fetched from the repository 3 hours ago. The original is authoritative.

Questions

About Demo

How do I install Demo?

Run claude mcp add demo -- npx -y @mcp-workbench/demo-mcp, then add the server to your MCP client's configuration.

Is Demo safe to use with an AI agent?

Its trust score is 65 out of 100 (good). It passes 3 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Demo still maintained?

The last commit was 6 months ago. That's long enough that you should check whether the maintainer is responding to issues before depending on it.